cve-2016-0728-testbed

CVE-2016-0728 testbed This repository contains a test program for CVE-2016-0728, a refcount leak and overflow bug in Linux, that leads to a use-after-free. The bug was found and explained by Perception Point. I am not affiliated to them. Usage root@kitploit: Welcome to the CVE-2016-0728 testbed...

CVE-2026-42978-PoC-Research

CVE-2026-42978 PoC e Investigación — Use-After-Free en Notificaciones Push de Windows Condición de carrera en el servicio de Notificaciones Push de Windows WpnService que se ejecuta como NT AUTHORITY\SYSTEM. Un atacante con acceso local puede desencadenar un use-after-free durante el apagado de l...

clr

CLR C omprobador de L ifetimes vida útil y otros R efinement types tipos de refinamiento para Zig Vídeo: https://www.youtube.com/watch?v=mf0WzTOe-40 Patrocinio: https://buymeacoffee.com/dnautics discutir en hn: https://news.ycombinator.com/item?id=42923829 discutir en lobste.rs:...

CVE-2021-30573

CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...

CVE-2022-2586-LPE

CVE-2022-2586-LPE LPE N-day Exploit for CVE-2022-2586: Linux kernel nftobject UAF root@kitploit: gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread Author: Alejandro Guerrero [email protected] Copyright C 2022 Qualys, Inc...

redis_exploit

CVE-2025-49844 RediShell - Lab Environment A practical lab environment for testing and understanding the critical CVE-2025-49844 RediShell vulnerability in Redis. ⚠️ WARNING This is for educational purposes only! Only use on systems you own or have explicit permission to test Never expose to the...

CVE-2024-1065

CVE-2024-1065 — Page Cache Exploitation PoC Proof-of-concept exploit for CVE-2024-1065, a physical page use-after-free in the ARM Mali GPU kernel driver. The exploit demonstrates page cache exploitation : racing a freed MIGRATEMOVABLE page into the in-memory code image of a SUID binary, then...

CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit

CVE-2019-5096 Exploit de DoS por Use After Free root@kitploit: python TriggerDOS.py ip Análisis de la vulnerabilidad https://github.com/embedthis/goahead.git Enlace de GitHub de GoAhead git diff del parche Análisis del código clave En el código, localizamos upload.c:370; se puede ver que antes de...

StackRot

StackRot CVE-2023-3269: Linux kernel privilege escalation vulnerability GitHub-CI-verified exploit A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement...

Internet-Explorer-UAF

This repository does not have a README...

CVE-2020-0624

CVE-2020-0624 win32k use-after-free poc...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

CVE-2021-40449

CVE-2021-40449 My exploit for CVE-2021-40449, a Windows LPE via a UAF in win32kfull!GreResetDCInternal. short wu along with the UAF vulnerabilty other primitives are being used to make this exploit possible: leaking the exploit's access token address in ring0 via NtQuerySystemInformation function...

bincat

Introducción ¿Qué es BinCAT? BinCAT es un kit de análisis de código binario estático , diseñado para ayudar a los ingenieros inversos, directamente desde IDA o usando Python para automatización. Incluye: análisis de valores registros y memoria análisis de contaminación reconstrucción y propagació...

CVE-2025-47917

Exploit CVE-2025-47917 Use-After-Free en mbedTLS Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnerabilidad : Use-After-Free UAF en el análisis de nombres de mbedTLS 3.6.4 Descripción Este repositorio contiene un exploit que apunta a una vulnerabilidad Use-After-Free en la...

CVE-2017-0261

CVE-2017-0261 and Exploit Sample Analysis 0x01 Vulnerability Description Cause: When opening an Office document, FLTLDR.EXE is used to render an embedded EPS file containing the vulnerability. The file is written in PostScript language and can be exploited by an attacker through a "save-restore"...

huawei-p10-cve-2017-8890-unlock

Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...

CVE-2016-0846-PoC

CVE-2016-0846-PoC...

CVE-2025-30400

Concepto CVE-2025-30400: Use-After-Free UAF en Windows DWM Resumen del proyecto Este repositorio presenta el Concepto CVE-2025-30400 , un programa en Python diseñado para ilustrar el impacto de una vulnerabilidad de día cero de escalada de privilegios Use-After-Free UAF , como la reportada en...